re-enable stig
This commit is contained in:
@@ -63,7 +63,7 @@ env:
|
||||
# DISA STIG hardening (OpenSCAP + SSG, diskless/UKI/kiosk tailoring). Report-only
|
||||
# in CI: the scan + deviations report are published as artifacts; the build is
|
||||
# never failed on score. Set "false" to skip hardening (boot/secure-path bench).
|
||||
ENABLE_STIG: "false"
|
||||
ENABLE_STIG: "true"
|
||||
# ===========================================================================
|
||||
# TEMPORARY: 802.1X + MACsec are DISABLED for this build (rd.dot1x=0) so the
|
||||
# UKI / rootfs / NVMe-oF boot path can be validated on an OPEN switch port.
|
||||
|
||||
Reference in New Issue
Block a user